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Dated: 16 May 2023 
Subject: TCF v2.2 Launch & Timeline 
Dear TCF Vendors and CMPs, 


In order to continue helping players in the online ecosystem comply with certain requirements 
of the ePrivacy Directive and the GDPR, the Transparency & Consent Framework Steering 
Group has approved iterations to the Framework. The TCF working groups have worked 
intensively to bring further standardisation of the information and choices that should be 
provided to users over the processing of their personal data, and to how these choices should 
be captured, communicated and respected. 


Constant evolutions in case law as well as in guidelines of Data Protection Authorities (DPAs) 
place even higher demands on market participants in terms of data protection, and the 
Transparency & Consent Framework v2.2 (TCF v2.2) brings meaningful changes in an attempt 
to better meet the expectations of regulators and needs of end-users. 


TCF v2.2 main policy amendments 


1. Removal of the legitimate interest legal basis for advertising & content personalisation: 
within the scope of the TCF, Vendors will only be able to select consent as an 
acceptable legal basis for purposes 3, 4, 5 and 6 at registration level; 

2. Improvements to the information provided to end-users: the purposes and features’ 
names and descriptions have changed. The legal text has been removed and replaced 
by user-friendly descriptions - supplemented by examples of real-use cases 
(illustrations); 

3. Standardisation of additional information about Vendors: Vendors will be required to 
provide additional information about their data processing operations - so that this 
information can in turn be disclosed to end-users; 

o Categories of data collected 
o Retention periods on a per-purpose basis 
o Legitimate interest(s) at stake - where applicable 

4. Transparency over the number of Vendors: CMPs will be required to disclose the total 
number of Vendors seeking to establish a legal basis on the first layer of their Uls; 

5. Specific requirements to facilitate users’ withdrawal of consent: Publishers and CMPs 
will need to ensure that users can resurface the CMP Uls and withdraw consent easily. 


Please consult the relevant sections of the updated Policies for further details and IAB 
Europe's blogpost here. 


TCF v2.2 Technical specifications updates 


With a view to implementing these policy changes, IAB Tech Lab has updated the technical 
specifications for the Transparency & Consent Framework. These changes include: 
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1. Deprecation of the getTCData and requirement for Vendors to use eventListeners, 
where applicable 
2. Updates to the GVL: the version will be incremented to 3 and the GVL will include 
additional data: 
o new fields for taxonomy of categories of data 
o inclusion of data retention periods per purpose 
o support for multiple languages URL declaration 


Please consult the updated Technical Specifications for further details and IAB Tech 
Lab's blogpost here. 


The Javascript Library that supports TCF participants’ implementation is also being updated 
to accommodate TCF v2.2 here. 


Implementation timeline 


Please note the following deadlines: 
30 June 2023 


Deadline for Vendors to update their GVL registration with the new required information (as 
well as any other required information they failed to update previously). They can do so by 
logging-in to the GVL registration portal here that has been updated with new registration 
fields for TCF v2.2. If you don't see your existing data in the portal, clear your cache or log-in 
using a different browser. 


Only Vendors that update their GVL registration according to the requirements will be 
published in the new version of the GVL (v3). 


Vendors updating their registration will also continue to be published in the current version 
of the GVL (v2) that will continue to run until the end of the implementation period. 


The GVL v3 will start being published weekly as Vendors update their registrations at 
https://vendor-list.consensu.org/v3/vendor-list.json, to enable CMPs to test the new format, and 
to start building new user-facing disclosures in line with the requirements of the Policies. 
Translation will be made available progressively here. 


10 July 2023 (Reminder) 


Deadline for CMPs to host their scripts on a domain other than_consensu.org subdomains as 
per the notification here. 


31 July 2023 
Deadline for Vendors to complete a TCF Compliance Assessment form and submit it through 


the GVL registration portal as part of the updated TCF Compliance programmes described 
here. 
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30 September 2023 - end of implementation period 


CMPs are required to implement the new policies and specifications by 30 September 2023. 
CMP Framework Uls will not need to apply for re-validation. Compliance with the new 
requirements will, however, be verified as part of IAB Europe's regular monitoring of CMPs’ 
live installations as of the implementation deadline. To support CMPs in their developments, 
IAB Europe has released a new CMP Validator Chrome Extension available here that includes 
all requirements of TCF v2.2. 


Vendors are required to implement the new policies and specifications by 30 September 2023. 
Similar to CMPs, compliance with the new requirements will be verified as part of IAB Europe's 


regular monitoring of Vendors’ live installations as of the implementation deadline. 


Please visit IAB Europe's website for more information or the FAQs document here. Dedicated 
webinars will be organised at the beginning of June for each category of participants, please 
stay tuned for additional communications later in the week which will provide registration links 
to sign up and attend. 


Thank you for all of your support with the launch of TCF 2.2. If you have any additional 
questions please email framework@iabeurope.eu 


All the best 
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